$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27c0c99a-c46c-3555-8474-cd1297fcfb1d.roa File: 27c0c99a-c46c-3555-8474-cd1297fcfb1d.roa (raw, json) Hash identifier: t0jIp1IUJ5IHwj6T+P/9+5M2V7c9JLPiK6y+9zFjSqA= Subject key identifier: 4C:F5:F5:7B:F7:92:96:B3:DD:E1:EA:3E:1E:B3:BD:9E:ED:0E:D2:FC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853BDB8755D1740C1C5C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27c0c99a-c46c-3555-8474-cd1297fcfb1d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.198.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3b:db:87:55:d1:74:0c:1c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9f02c7ea-e5a9-441d-8974-9752399d8bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:93:67:c4:94:9c:87:dc:a6:8e:7f:c8:8c: 36:c4:b0:bb:9b:51:41:2a:5d:de:e1:cb:0e:6a:0f: 53:9f:a9:78:c8:30:23:e7:eb:f6:df:71:19:8c:e4: f3:de:e0:79:a9:46:82:71:1b:60:2f:75:31:b8:af: df:65:c1:29:2b:d7:c6:93:69:ad:b1:bb:9d:1d:59: 8c:32:58:e9:ed:07:7a:6e:86:e2:3d:54:6c:e9:94: 0a:a1:44:22:10:ff:ab:61:cb:fe:f9:c4:25:59:8d: a9:e4:0f:3d:c9:71:25:fe:e4:17:1c:cf:32:d2:d5: f1:fd:dc:a5:be:29:a1:14:b4:95:e9:5d:0b:3f:75: 7f:9a:ad:c4:a8:10:90:db:29:34:b1:17:dd:61:fa: 55:51:40:d4:57:69:3e:29:af:70:bd:bc:ed:26:17: 7b:f7:6a:31:bb:7c:2c:a3:f6:af:32:3c:f0:95:65: 16:eb:be:f0:91:35:6f:2b:87:43:d0:2d:a3:08:3b: 07:58:3e:e2:cf:8c:b9:67:0d:4d:86:7c:d5:97:e7: 90:07:b5:e8:28:78:65:b1:74:f8:2f:a2:a9:6c:b8: c5:b2:05:51:97:fc:f5:d3:ab:71:1a:f1:1c:d2:4f: 5f:3e:de:33:3b:8e:95:9b:c1:83:50:24:47:57:a0: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:F5:7B:F7:92:96:B3:DD:E1:EA:3E:1E:B3:BD:9E:ED:0E:D2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27c0c99a-c46c-3555-8474-cd1297fcfb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d7:4a:4c:3c:8c:c4:08:9b:7c:39:a1:ec:86:82:0e:17:7a: d8:71:a2:57:dd:4f:7e:4e:7b:34:b3:23:7b:aa:cd:58:54:c2: e9:73:d0:67:ac:bd:cc:e9:1d:83:be:31:f7:b2:7b:6d:eb:02: 61:9e:8d:d5:6b:c6:fe:b5:f6:a6:a4:1e:ce:d0:eb:77:e9:91: ad:f6:94:1b:c7:92:f3:70:35:6c:30:ce:37:a5:87:65:7b:4c: 8d:f0:e9:3a:54:b3:c7:96:9a:46:59:58:d3:f5:08:0b:82:40: 5d:56:91:18:21:ff:3d:e2:b4:ac:eb:e1:93:a9:fd:9c:b9:f5: 5a:ec:d2:1c:35:80:68:ef:9c:74:de:fe:0a:b5:04:5d:85:1c: c0:3b:ea:50:0c:fe:f1:c6:8f:2e:19:b7:61:5b:3f:99:45:34: 6e:f6:35:13:d6:4d:96:d6:a8:fb:ea:4e:d2:fd:69:93:b5:c4: 06:eb:66:49:06:33:3a:ee:d3:51:8a:35:00:42:c5:04:6c:d3: 87:83:68:6f:c3:c2:d1:84:0d:1e:62:35:f4:8f:ab:a4:a3:5f: 10:84:63:57:2f:66:c3:bd:38:b3:33:88:7b:c0:11:3c:ea:10: b3:40:47:fb:d6:53:ea:0e:52:9a:6c:19:3d:20:19:c5:6f:08: 8c:46:f8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTvbh1XRdAwcXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWYwMmM3ZWEtZTVhOS00NDFkLTg5NzQtOTc1MjM5OWQ4YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoqTZ8SUnIfcpo5/yIw2xLC7m1FBKl3e4csO ag9Tn6l4yDAj5+v233EZjOTz3uB5qUaCcRtgL3UxuK/fZcEpK9fGk2mtsbudHVmM Mljp7Qd6bobiPVRs6ZQKoUQiEP+rYcv++cQlWY2p5A89yXEl/uQXHM8y0tXx/dyl vimhFLSV6V0LP3V/mq3EqBCQ2yk0sRfdYfpVUUDUV2k+Ka9wvbztJhd792oxu3ws o/avMjzwlWUW677wkTVvK4dD0C2jCDsHWD7iz4y5Zw1NhnzVl+eQB7XoKHhlsXT4 L6KpbLjFsgVRl/z106txGvEc0k9fPt4zO46Vm8GDUCRHV6DJewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz19Xv3kpaz3eHqPh6zvZ7tDtL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjdjMGM5OWEtYzQ2Yy0z NTU1LTg0NzQtY2QxMjk3ZmNmYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELXSkw8jMQIm3w5oeyGgg4XethxolfdT35OezSzI3uqzVhUwulz0Ges vczpHYO+Mfeye23rAmGejdVrxv619qakHs7Q63fpka32lBvHkvNwNWwwzjelh2V7 TI3w6TpUs8eWmkZZWNP1CAuCQF1WkRgh/z3itKzr4ZOp/Zy59Vrs0hw1gGjvnHTe /gq1BF2FHMA76lAM/vHGjy4Zt2FbP5lFNG72NRPWTZbWqPvqTtL9aZO1xAbrZkkG Mzru01GKNQBCxQRs04eDaG/DwtGEDR5iNfSPq6SjXxCEY1cvZsO9OLMziHvAETzq ELNAR/vWU+oOUppsGT0gGcVvCIxG+II= -----END CERTIFICATE-----Generated at Sun May 4 20:54:29 2025 by rpki-client